drop pcap · extract tls handshakes · parse certificates · ja3 and sni anomalies · export csv · runs locally
drop pcap/pcapng with tls traffic